CVE-2011-0745
SugarCRM < 6.1.3 - Authenticated Information Disclosure via ShowDuplicates Action
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2011-0745. PoCs published by RedTeam Pentesting GmbH.
AI-analyzed exploit summary The provided text describes an information disclosure vulnerability in SugarCRM where unauthenticated access to certain URLs exposes sensitive data. No actual exploit code is present, only a description and example URLs.
Description
SugarCRM before 6.1.3 does not properly handle reloads and direct requests for a warning page produced by a certain duplicate check, which allows remote authenticated users to discover (1) the names of customers via a ShowDuplicates action to the Accounts module, reachable through index.php; or (2) the names of contact persons via a ShowDuplicates action to the Contacts module, reachable through index.php.
Exploits (1)
The provided text describes an information disclosure vulnerability in SugarCRM where unauthenticated access to certain URLs exposes sensitive data. No actual exploit code is present, only a description and example URLs.